@nextcommerce/campaigns-os 1.48.0 → 1.52.0

package/agents/copilot/copilot-instructions.md

@@ -5,11 +5,11 @@ When this repository contains Campaigns OS artifacts, use them as the build hand
 - `campaign-runtime.build.json` defines the CampaignSpec, source adapter, target output, template family, deploy target, SDK origin state, and QA proof depth.
 - `.campaign-runtime/build-context.json` records page mappings and setup/build handoff details.
 - `.campaign-runtime/assembly-report.json` records stage evidence and blockers.
-- To pick up an existing campaign, run `campaigns-os readback .` and `campaigns-os next --packet campaign-runtime.build.json` before reading artifacts by hand; `next` blocks polish and QA again whenever the built output changes. The committed `.campaign-runtime/qa-verdict.json` keeps no order records or URLs: its `browser-test-order:<path>` assertions are the typed-card proof, and the full verdict is under `qa-output/`.
+- To pick up an existing campaign, run `npx --no-install campaigns-os readback .` and `npx --no-install campaigns-os next --packet campaign-runtime.build.json` before reading artifacts by hand; `next` blocks polish and QA again whenever the built output changes. The committed `.campaign-runtime/qa-verdict.json` keeps no order records or URLs: its `browser-test-order:<path>` assertions are the typed-card proof, and the full verdict is under `qa-output/`.
 - `.campaign-runtime/theme/theme-report.json`, when present, is optional brand-theme evidence. Generated `brand-theme.css` must load after `next-core.css`; missing or low-confidence theme is a warning/skipped reason, not permission to edit SDK-owned runtime surfaces.
 
 CampaignSpec validation is owned by the public `@nextcommerce/campaigns-os/campaign-spec` rules surfaced through doctor `spec.validation` findings; use structured rule/path detail when available.
 
-Preserve Campaign Cart SDK-owned commerce surfaces. Replace starter demo refs from CampaignSpec/API. Prepared AI/exported HTML must be converted into page-kit-ready source first: keep page-owned body markup, strip document wrappers, add YAML frontmatter, move shared CSS/assets into the campaign structure, and use Liquid helpers only for page-kit links/assets/includes. Landing/presell pages can preserve source design; checkout/upsell/downsell/receipt should use starter-template commerce surfaces as SDK contract references while campaign/source owns visual chrome. Copy starter template families atomically with dependent pages, `_includes/`, `_layouts/`, `assets/css/`, and `assets/js/`; do not copy only checkout/receipt pages. Do not claim launch readiness until build, polish, deploy, and QA evidence are recorded.
+Preserve Campaign Cart SDK-owned commerce surfaces. Replace starter demo refs from CampaignSpec/API. Prepared AI/exported HTML must be converted into page-kit-ready source first: keep page-owned body markup, strip document wrappers, add YAML frontmatter, move shared CSS/assets into the campaign structure, and use Liquid helpers only for page-kit links/assets/includes. Landing/presell pages can preserve source design; checkout/upsell/downsell/receipt should use starter-template commerce surfaces as SDK contract references while campaign/source owns visual chrome. Reproduce the source design's own proof and urgency elements as designed (reviews, ratings, stock counters, countdowns, guarantees). They are the merchant's content; Campaigns OS does not review them, so do not remove, soften or flag them. Copy starter template families atomically with dependent pages, `_includes/`, `_layouts/`, `assets/css/`, and `assets/js/`; do not copy only checkout/receipt pages. Do not claim launch readiness until build, polish, deploy, and QA evidence are recorded.
 
-Before Polish becomes terminal or hands off to deploy/QA, install the package-owned Playwright browser with `npm run qa:install-browser`, serve the current build, and run `campaigns-os polish capture --packet campaign-runtime.build.json --base-url <served-current-build-url>`. After that checkpoint clears, QA must use the Campaigns OS Node/npm runner: run `campaigns-os qa resolve`, then run `campaigns-os qa run --browser --test-order common` against the tested URL. Typed-card test-order proof must use `campaigns-os qa run --test-order <common|checkout|decline|accept|both|full|explicit-path>` through the tested checkout and rendered upsell controls; global test cards bypass the gateway and create no transactions, so no permission/approval is needed. `common` runs every actual terminal path when they fit under the flood cap (`--max-test-orders`, 6 by default); above the cap it runs the checkout baseline, first-offer accept and decline, and a deduplicated shortest real receipt path, then adds one decline path per offer or downsell page not yet declined, up to the cap, and names any page left out. A page counts as covered only when an order clicks its decline; the `browser-test-order:upsell-action-coverage` verdict row warns naming each page whose decline no order clicked. `full` walks every actual terminal path in the selected checkout topology; cycles, missing routes, and reachable nonterminals block exhaustive proof before browser launch. The accidental-flood cap remains `6`, and an overflow names the exact explicit `--max-test-orders` raise. Analytics correctness is two-phase: the campaign-root visit inventories declared providers/tags only, and the same canonical typed-card run proves Purchase only from the topology-recognized final receipt document after `--analytics-settle`. Missing/unrecognized receipts are manual-review warnings; recognized receipt no-signal and capture/settle errors block. Only the genuine recognized-receipt/no-signal failure is waivable; capture/settle errors are not. Checkout/upsell signals remain whole-journey parity evidence and cannot satisfy a silent receipt. Do not use `next.getCartData().cartLines` as cart-populated proof; use typed-card order read-back, `cart:updated` payload `items` / `summary.lines`, and rendered bundle DOM evidence. Localhost on any port is a Campaigns App Development domain for SDK QA with analytics suppressed; non-localhost preview/production origins still need SDK origin allowlist confirmation. Do not use external browser skills, SDK test-mode events, or direct backend orders as launch proof. Campaigns OS proof is not merchant launch readiness; before launch, confirm production storefront URL, live payment methods, shipping markets, legal/support URLs, analytics expectations, and merchant-side configuration.
+Before Polish becomes terminal or hands off to deploy/QA, install the package-owned Playwright browser with `npm run qa:install-browser`, serve the current build, and run `npx --no-install campaigns-os polish capture --packet campaign-runtime.build.json --base-url <served-current-build-url>`. After that checkpoint clears, QA must use the Campaigns OS Node/npm runner: run `npx --no-install campaigns-os qa resolve`, then run `npx --no-install campaigns-os qa run --browser --test-order common` against the tested URL. Typed-card test-order proof must use `npx --no-install campaigns-os qa run --test-order <common|checkout|decline|accept|both|full|explicit-path>` through the tested checkout and rendered upsell controls. `qa run` has no permission flag: coverage is its only control. Test orders still land in the store as real orders (global test cards: no charge, no transaction) that someone may have to cancel. Unless the operator has already said test orders are fine for this campaign, ask once, up front in your first turn with your other setup questions, so the answer covers the whole build and QA and neither stops for it later. `common` runs every actual terminal path when they fit under the flood cap (`--max-test-orders`, 6 by default); above the cap it runs the checkout baseline, first-offer accept and decline, and a deduplicated shortest real receipt path, then adds one decline path per offer or downsell page not yet declined, up to the cap, and names any page left out. A page counts as covered only when an order clicks its decline; the `browser-test-order:upsell-action-coverage` verdict row warns naming each page whose decline no order clicked. `full` walks every actual terminal path in the selected checkout topology; cycles, missing routes, and reachable nonterminals block exhaustive proof before browser launch. The accidental-flood cap remains `6`, and an overflow names the exact explicit `--max-test-orders` raise. Analytics correctness is two-phase: the campaign-root visit inventories declared providers/tags only, and the same canonical typed-card run proves Purchase only from the topology-recognized final receipt document after `--analytics-settle`. Missing/unrecognized receipts are manual-review warnings; recognized receipt no-signal and capture/settle errors block. Only the genuine recognized-receipt/no-signal failure is waivable; capture/settle errors are not. Checkout/upsell signals remain whole-journey parity evidence and cannot satisfy a silent receipt. Do not use `next.getCartData().cartLines` as cart-populated proof; use typed-card order read-back, `cart:updated` payload `items` / `summary.lines`, and rendered bundle DOM evidence. Localhost on any port is a Campaigns App Development domain for SDK QA with analytics suppressed; non-localhost preview/production origins still need SDK origin allowlist confirmation. Do not use external browser skills, SDK test-mode events, or direct backend orders as launch proof. Campaigns OS proof is not merchant launch readiness; before launch, confirm production storefront URL, live payment methods, shipping markets, legal/support URLs, analytics expectations, and merchant-side configuration.

package/agents/cursor/campaigns-os.mdc

@@ -6,8 +6,8 @@ globs:
 alwaysApply: false
 ---
 
-Read Campaigns OS artifacts before editing campaign pages. To pick up an existing campaign, run `campaigns-os readback .` and `campaigns-os next --packet campaign-runtime.build.json` before reading artifacts by hand; `next` blocks polish and QA again whenever the built output changes. The committed `.campaign-runtime/qa-verdict.json` keeps no order records or URLs: its `browser-test-order:<path>` assertions are the typed-card proof, and the full verdict is under `qa-output/`. Treat CampaignSpec/API values as live commerce truth, starter-template contracts as SDK surface truth, and designed HTML/assets as visual/content intent. Treat CampaignSpec validation as owned by the public `@nextcommerce/campaigns-os/campaign-spec` rules surfaced through doctor `spec.validation` findings; use structured rule/path detail when available. If `context.theme` or `.campaign-runtime/theme/theme-report.json` exists, use it as optional brand-theme evidence; generated `brand-theme.css` must load after `next-core.css`, and missing/low-confidence theme is a warning or skipped reason, not permission to edit SDK-owned runtime surfaces.
+Read Campaigns OS artifacts before editing campaign pages. To pick up an existing campaign, run `npx --no-install campaigns-os readback .` and `npx --no-install campaigns-os next --packet campaign-runtime.build.json` before reading artifacts by hand; `next` blocks polish and QA again whenever the built output changes. The committed `.campaign-runtime/qa-verdict.json` keeps no order records or URLs: its `browser-test-order:<path>` assertions are the typed-card proof, and the full verdict is under `qa-output/`. Treat CampaignSpec/API values as live commerce truth, starter-template contracts as SDK surface truth, and designed HTML/assets as visual/content intent. Treat CampaignSpec validation as owned by the public `@nextcommerce/campaigns-os/campaign-spec` rules surfaced through doctor `spec.validation` findings; use structured rule/path detail when available. If `context.theme` or `.campaign-runtime/theme/theme-report.json` exists, use it as optional brand-theme evidence; generated `brand-theme.css` must load after `next-core.css`, and missing/low-confidence theme is a warning or skipped reason, not permission to edit SDK-owned runtime surfaces.
 
-Do not carry over demo package, shipping, voucher, payment, tracking, footer, or SEO values. Prepared AI/exported HTML must be converted into page-kit-ready source first: keep page-owned body markup, strip document wrappers, add YAML frontmatter, move shared CSS/assets into the campaign structure, and use Liquid helpers only for page-kit links/assets/includes. Preserve prepared landing/presell source HTML when it is a real standalone design. For checkout/upsell/downsell/receipt, use starter-template commerce surfaces as SDK contract references while campaign/source owns visual chrome. Copy starter template families atomically with dependent pages, `_includes/`, `_layouts/`, `assets/css/`, and `assets/js/`; do not copy only checkout/receipt pages. Emit SDK routing meta tags as campaign-root paths such as `/campaign-slug/upsell/`. Preserve SDK-owned checkout/cart/upsell/receipt surfaces. For `shop-three-step`, shipping is dynamic via `window.next.getShippingMethods()`.
+Do not carry over demo package, shipping, voucher, payment, tracking, footer, or SEO values. Prepared AI/exported HTML must be converted into page-kit-ready source first: keep page-owned body markup, strip document wrappers, add YAML frontmatter, move shared CSS/assets into the campaign structure, and use Liquid helpers only for page-kit links/assets/includes. Preserve prepared landing/presell source HTML when it is a real standalone design. For checkout/upsell/downsell/receipt, use starter-template commerce surfaces as SDK contract references while campaign/source owns visual chrome. Reproduce the source design's own proof and urgency elements as designed (reviews, ratings, stock counters, countdowns, guarantees). They are the merchant's content; Campaigns OS does not review them, so do not remove, soften or flag them. Copy starter template families atomically with dependent pages, `_includes/`, `_layouts/`, `assets/css/`, and `assets/js/`; do not copy only checkout/receipt pages. Emit SDK routing meta tags as campaign-root paths such as `/campaign-slug/upsell/`. Preserve SDK-owned checkout/cart/upsell/receipt surfaces. For `shop-three-step`, shipping is dynamic via `window.next.getShippingMethods()`.
 
-Before Polish becomes terminal or hands off to deploy/QA, install the package-owned Playwright browser with `npm run qa:install-browser`, serve the current build, and run `campaigns-os polish capture --packet campaign-runtime.build.json --base-url <served-current-build-url>`. After that checkpoint clears, QA uses the Campaigns OS Node/npm runner: `campaigns-os qa resolve`, then `campaigns-os qa run --browser --test-order common` against the tested URL. Test-order proof uses `campaigns-os qa run --test-order <common|checkout|decline|accept|both|full|explicit-path>` through the tested checkout and rendered upsell controls; global test cards bypass the gateway and create no transactions, so no permission/approval is needed. `common` runs every actual terminal path when they fit under the flood cap (`--max-test-orders`, 6 by default); above the cap it runs the checkout baseline, first-offer accept and decline, and a deduplicated shortest real receipt path, then adds one decline path per offer or downsell page not yet declined, up to the cap, and names any page left out. A page counts as covered only when an order clicks its decline; the `browser-test-order:upsell-action-coverage` verdict row warns naming each page whose decline no order clicked. `full` walks every actual terminal path in the selected checkout topology; cycles, missing routes, and reachable nonterminals block exhaustive proof before browser launch. The accidental-flood cap remains `6`, and an overflow names the exact explicit `--max-test-orders` raise. Analytics correctness is two-phase: the campaign-root visit inventories declared providers/tags only, and the same canonical typed-card run proves Purchase only from the topology-recognized final receipt document after `--analytics-settle`. Missing/unrecognized receipts are manual-review warnings; recognized receipt no-signal and capture/settle errors block. Only the genuine recognized-receipt/no-signal failure is waivable; capture/settle errors are not. Checkout/upsell signals remain whole-journey parity evidence and cannot satisfy a silent receipt. Do not use `next.getCartData().cartLines` as cart-populated proof; use typed-card order read-back, `cart:updated` payload `items` / `summary.lines`, and rendered bundle DOM evidence. Localhost on any port is a Campaigns App Development domain for SDK QA with analytics suppressed; non-localhost preview/production origins still need SDK origin allowlist confirmation. External browser skills, SDK test-mode events, and direct backend orders are not launch proof. Campaigns OS proof is not merchant launch readiness; before launch, confirm production storefront URL, live payment methods, shipping markets, legal/support URLs, analytics expectations, and merchant-side configuration.
+Before Polish becomes terminal or hands off to deploy/QA, install the package-owned Playwright browser with `npm run qa:install-browser`, serve the current build, and run `npx --no-install campaigns-os polish capture --packet campaign-runtime.build.json --base-url <served-current-build-url>`. After that checkpoint clears, QA uses the Campaigns OS Node/npm runner: `npx --no-install campaigns-os qa resolve`, then `npx --no-install campaigns-os qa run --browser --test-order common` against the tested URL. Test-order proof uses `npx --no-install campaigns-os qa run --test-order <common|checkout|decline|accept|both|full|explicit-path>` through the tested checkout and rendered upsell controls. `qa run` has no permission flag: coverage is its only control. Test orders still land in the store as real orders (global test cards: no charge, no transaction) that someone may have to cancel. Unless the operator has already said test orders are fine for this campaign, ask once, up front in your first turn with your other setup questions, so the answer covers the whole build and QA and neither stops for it later. `common` runs every actual terminal path when they fit under the flood cap (`--max-test-orders`, 6 by default); above the cap it runs the checkout baseline, first-offer accept and decline, and a deduplicated shortest real receipt path, then adds one decline path per offer or downsell page not yet declined, up to the cap, and names any page left out. A page counts as covered only when an order clicks its decline; the `browser-test-order:upsell-action-coverage` verdict row warns naming each page whose decline no order clicked. `full` walks every actual terminal path in the selected checkout topology; cycles, missing routes, and reachable nonterminals block exhaustive proof before browser launch. The accidental-flood cap remains `6`, and an overflow names the exact explicit `--max-test-orders` raise. Analytics correctness is two-phase: the campaign-root visit inventories declared providers/tags only, and the same canonical typed-card run proves Purchase only from the topology-recognized final receipt document after `--analytics-settle`. Missing/unrecognized receipts are manual-review warnings; recognized receipt no-signal and capture/settle errors block. Only the genuine recognized-receipt/no-signal failure is waivable; capture/settle errors are not. Checkout/upsell signals remain whole-journey parity evidence and cannot satisfy a silent receipt. Do not use `next.getCartData().cartLines` as cart-populated proof; use typed-card order read-back, `cart:updated` payload `items` / `summary.lines`, and rendered bundle DOM evidence. Localhost on any port is a Campaigns App Development domain for SDK QA with analytics suppressed; non-localhost preview/production origins still need SDK origin allowlist confirmation. External browser skills, SDK test-mode events, and direct backend orders are not launch proof. Campaigns OS proof is not merchant launch readiness; before launch, confirm production storefront URL, live payment methods, shipping markets, legal/support URLs, analytics expectations, and merchant-side configuration.

package/campaign-spec/dist/rules/campaign-metadata.d.ts

@@ -8,7 +8,11 @@
  * a need to subset them. If that need shows up, split into
  * CampaignPaymentKey and CampaignRefId.
  *
- * Message text inherited verbatim from the pre-#110 validator at migration time.
+ * The ref_id message is inherited verbatim from the pre-#110 validator. The
+ * payment_env_key message keeps that validator's first sentence, which
+ * consumers match, and adds which field is empty and where its value comes
+ * from: a Campaigns API key in the spec (campaign.campaigns_api_key) is a
+ * different field and does not satisfy it.
  */
 import type { Rule } from '../types.ts';
 export declare const CampaignMetadata: Rule;

package/campaign-spec/dist/rules/campaign-metadata.js

@@ -8,7 +8,11 @@
  * a need to subset them. If that need shows up, split into
  * CampaignPaymentKey and CampaignRefId.
  *
- * Message text inherited verbatim from the pre-#110 validator at migration time.
+ * The ref_id message is inherited verbatim from the pre-#110 validator. The
+ * payment_env_key message keeps that validator's first sentence, which
+ * consumers match, and adds which field is empty and where its value comes
+ * from: a Campaigns API key in the spec (campaign.campaigns_api_key) is a
+ * different field and does not satisfy it.
  */
 export const CampaignMetadata = {
     id: 'CampaignMetadata',
@@ -21,7 +25,10 @@ export const CampaignMetadata = {
             violations.push({
                 ruleId: 'CampaignMetadata',
                 severity: 'warning',
-                message: 'No campaign loaded — campaign key required for spec export.',
+                message: 'No campaign loaded — campaign key required for spec export. ' +
+                    'campaign.payment_env_key is empty: copy it from the campaign retrieve body ' +
+                    '(docs/build-packet.md, "Reading package, offer and shipping refs"). ' +
+                    'A Campaigns API key in the spec does not fill this field.',
                 path: '/campaign/payment_env_key',
                 data: { missing: 'payment_env_key' },
             });

package/campaign-spec/dist/rules/design-source-shape.js

@@ -25,6 +25,10 @@
  * a build blocker. The export tool itself is the real validator at handoff
  * time; this rule keeps Map Builder authors honest while editing.
  */
+// design_source.type values with a producer (docs/entry-points.md). A page of
+// one of these types needs its file_url; any other type gets the hand-written
+// HTML way out as well.
+const DESIGN_TOOL_PRODUCERS = new Set(['figma', 'ai-generated']);
 const FIGMA_URL_PATTERN = /^https:\/\/(?:www\.)?figma\.com\//i;
 const ANY_URL_PATTERN = /^https?:\/\/\S+/i;
 function isNonEmptyString(value) {
@@ -44,6 +48,9 @@ export const DesignSourceShape = {
                     return;
                 const basePath = `/funnels/${funnelIdx}/pages/${pageIdx}/design_source`;
                 const pageLabel = page.label || page.id || '(unnamed page)';
+                // One normalization for every type comparison below, so "Figma" and
+                // " figma " are the same producer everywhere in this rule.
+                const designType = String(design.type ?? '').trim().toLowerCase();
                 // 1. type
                 if (!isNonEmptyString(design.type)) {
                     violations.push({
@@ -59,7 +66,10 @@ export const DesignSourceShape = {
                     violations.push({
                         ruleId: 'DesignSourceShape',
                         severity: 'warning',
-                        message: `"${pageLabel}" — design_source.file_url is missing; expected the design-tool file URL.`,
+                        message: `"${pageLabel}" — design_source.file_url is missing; expected the design-tool file URL.` +
+                            (DESIGN_TOOL_PRODUCERS.has(designType)
+                                ? ''
+                                : ' Hand-written or template HTML has no design tool: remove design_source from the page (see docs/entry-points.md).'),
                         path: `${basePath}/file_url`,
                         data: { pageId: page.id, check: 'file-url-missing' },
                     });
@@ -73,7 +83,7 @@ export const DesignSourceShape = {
                         data: { pageId: page.id, check: 'file-url-shape', value: design.file_url },
                     });
                 }
-                else if (design.type === 'figma' && !FIGMA_URL_PATTERN.test(design.file_url)) {
+                else if (designType === 'figma' && !FIGMA_URL_PATTERN.test(design.file_url)) {
                     // 3. figma-specific: must be a figma.com URL
                     violations.push({
                         ruleId: 'DesignSourceShape',
@@ -121,7 +131,7 @@ export const DesignSourceShape = {
                             });
                             continue;
                         }
-                        if (design.type === 'figma' && !FIGMA_URL_PATTERN.test(value)) {
+                        if (designType === 'figma' && !FIGMA_URL_PATTERN.test(value)) {
                             violations.push({
                                 ruleId: 'DesignSourceShape',
                                 severity: 'warning',

package/campaign-spec/dist/rules/sdk-version.js

@@ -47,7 +47,8 @@ export const SdkVersion = {
                 {
                     ruleId: 'SdkVersion',
                     severity: 'error',
-                    message: 'SDK version is required for spec export.',
+                    message: 'SDK version is required for spec export. Set global_config.sdk_version ' +
+                        'to the released Campaign Cart SDK version the pages load, in MAJOR.MINOR.PATCH form.',
                     path: '/global_config/sdk_version',
                 },
             ];

package/compatibility.json

@@ -1,6 +1,6 @@
 {
   "package": "@nextcommerce/campaigns-os",
-  "version": "1.48.0",
+  "version": "1.52.0",
   "status": "developer-preview",
   "contracts": {
     "campaign_spec": "4.2-4.3",

package/contracts/commerce-surface-catalog.json

@@ -849,8 +849,8 @@
       },
       "verification": {
         "sdk_version": "0.4.40",
-        "verified_at": "2026-10-01T16:01:10Z",
-        "evidence": "sdk-0.4.40-2026-10-01.2",
+        "verified_at": "2026-10-04T02:15:52Z",
+        "evidence": "sdk-0.4.40-2026-10-04",
         "status": "certified",
         "source": "template-verification.json"
       }
@@ -861,7 +861,7 @@
         "id": "template-reference-apollo",
         "family": "apollo",
         "version": "sdk-0.4.38-composable-upsells-2026-09-25",
-        "source_commit": "6c96525b6416872ad0e51918fe6ec82a9673808c",
+        "source_commit": "80f0e30f873b5a13a5232ffd76b20da53480ae57",
         "provenance_url": "https://raw.githubusercontent.com/NextCommerceCo/campaign-cart-starter-templates/main/docs/template-references/apollo/README.md",
         "contract_path": "contracts/commerce-surface-catalog.json",
         "standard_viewport_refs": [
@@ -1273,8 +1273,8 @@
       },
       "verification": {
         "sdk_version": "0.4.40",
-        "verified_at": "2026-10-01T16:01:10Z",
-        "evidence": "sdk-0.4.40-2026-10-01.2",
+        "verified_at": "2026-10-04T02:15:52Z",
+        "evidence": "sdk-0.4.40-2026-10-04",
         "status": "certified",
         "source": "template-verification.json"
       }
@@ -1584,8 +1584,8 @@
       },
       "verification": {
         "sdk_version": "0.4.40",
-        "verified_at": "2026-10-01T16:01:10Z",
-        "evidence": "sdk-0.4.40-2026-10-01.2",
+        "verified_at": "2026-10-04T02:15:52Z",
+        "evidence": "sdk-0.4.40-2026-10-04",
         "status": "certified",
         "source": "template-verification.json"
       }
@@ -1887,8 +1887,8 @@
       },
       "verification": {
         "sdk_version": "0.4.40",
-        "verified_at": "2026-10-01T16:01:10Z",
-        "evidence": "sdk-0.4.40-2026-10-01.2",
+        "verified_at": "2026-10-04T02:15:52Z",
+        "evidence": "sdk-0.4.40-2026-10-04",
         "status": "certified",
         "source": "template-verification.json"
       }
@@ -2228,8 +2228,8 @@
       },
       "verification": {
         "sdk_version": "0.4.40",
-        "verified_at": "2026-10-01T16:01:10Z",
-        "evidence": "sdk-0.4.40-2026-10-01.2",
+        "verified_at": "2026-10-04T02:15:52Z",
+        "evidence": "sdk-0.4.40-2026-10-04",
         "status": "certified",
         "source": "template-verification.json"
       }
@@ -2667,8 +2667,8 @@
       },
       "verification": {
         "sdk_version": "0.4.40",
-        "verified_at": "2026-10-01T16:01:10Z",
-        "evidence": "sdk-0.4.40-2026-10-01.2",
+        "verified_at": "2026-10-04T02:15:52Z",
+        "evidence": "sdk-0.4.40-2026-10-04",
         "status": "certified",
         "source": "template-verification.json"
       }
@@ -3024,8 +3024,8 @@
       },
       "verification": {
         "sdk_version": "0.4.40",
-        "verified_at": "2026-10-01T16:01:10Z",
-        "evidence": "sdk-0.4.40-2026-10-01.2",
+        "verified_at": "2026-10-04T02:15:52Z",
+        "evidence": "sdk-0.4.40-2026-10-04",
         "status": "certified",
         "source": "template-verification.json"
       }
@@ -3314,8 +3314,8 @@
       },
       "verification": {
         "sdk_version": "0.4.40",
-        "verified_at": "2026-10-01T16:01:10Z",
-        "evidence": "sdk-0.4.40-2026-10-01.2",
+        "verified_at": "2026-10-04T02:15:52Z",
+        "evidence": "sdk-0.4.40-2026-10-04",
         "status": "certified",
         "source": "template-verification.json"
       }
@@ -3334,30 +3334,15 @@
           {
             "families": [
               "olympus",
-              "apollo"
-            ],
-            "note": "Single-package check-style bump."
-          },
-          {
-            "families": [
+              "apollo",
+              "demeter",
               "olympus-mv-single-step",
               "apollo-mv-single-step",
-              "olympus-mv-two-step"
-            ],
-            "note": "MV/configurable bump: quantity sync via data-next-product-sync (product_id), so it sums across variant swaps (SDK 0.4.25+). See CLAUDE.md."
-          },
-          {
-            "families": [
+              "olympus-mv-two-step",
               "shop-single-step",
               "shop-three-step"
             ],
-            "note": "Shop bump layout for selector-less checkouts."
-          },
-          {
-            "families": [
-              "demeter"
-            ],
-            "note": "Editorial bump styling."
+            "note": "GENERATED from _shared/checkout/_includes/ (sync:shared, byte-identical by construction, lint:shared-enforced) since the #194 consolidation — edit the _shared source, never a family copy. Superset contract: pricing_mode + legacy show_* bools; package_sync/sync_quantity AND product_sync (product_id match for MV mains, wins when both set); per-family demo values live in page frontmatter (order_bump.check01)."
           }
         ]
       },
@@ -3375,30 +3360,25 @@
               "shop-single-step",
               "shop-three-step"
             ],
-            "note": "Shared unsynced product-card bump with optional PackageToggle line-item property field (SDK 0.4.27+)."
+            "note": "GENERATED from _shared/checkout/_includes/ (sync:shared, byte-identical by construction, lint:shared-enforced) since the #194 consolidation — edit the _shared source, never a family copy. Unsynced product-card bump with optional PackageToggle line-item property field (SDK 0.4.27+)."
           }
         ]
       },
       "bump-switch01.html": {
         "surface": "orderBump",
         "lineages": [
-          {
-            "families": [
-              "demeter"
-            ],
-            "note": "Switch-style bump with demeter styling."
-          },
           {
             "families": [
               "olympus",
               "apollo",
+              "demeter",
               "olympus-mv-single-step",
               "apollo-mv-single-step",
               "olympus-mv-two-step",
               "shop-single-step",
               "shop-three-step"
             ],
-            "note": "Shared switch-style bump."
+            "note": "GENERATED from _shared/checkout/_includes/ (sync:shared, byte-identical by construction, lint:shared-enforced) since the #194 consolidation — edit the _shared source, never a family copy. Switch-style bump; intentionally never quantity-synced."
           }
         ]
       },
@@ -3524,6 +3504,6 @@
     }
   },
   "_synced_from_repo": "NextCommerceCo/campaign-cart-starter-templates",
-  "_synced_from_ref": "main",
-  "_synced_from_sha": "37a8d945db4c360739ded98348814cfd632da94f"
+  "_synced_from_ref": "2c618942391ae398fb4812f36fc93e6632054874",
+  "_synced_from_sha": "2c618942391ae398fb4812f36fc93e6632054874"
 }